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Abstract 

In this paper we show that the polynomial x 17 - 5x 16 + 12a; 15 - 28s 14 + 72a; 13 - 132a; 12 + 116a; 11 - 
74a; 9 + 90a; 8 - 28a; 7 - 12a; 6 + 24a; 5 - 12a; 4 - 4a; 3 - 3a; - 1 G Q[x] has Galois group SL 2 (Fi 6 ), 
filling in a gap in the tables of Jiirgen Kliiners and Gunther Malle (see 1121 ). The computation of this 
polynomial uses modular forms and their Galois representations. 

1 Introduction 

It is a computational challenge to construct polynomials with a prescribed Galois group, see [12] for meth- 
ods and examples. Here, by the Galois group of a polynomial / 6 Q[x] we mean the Galois group of a 
splitting field of / over Q together with its natural action on the roots of / in this splitting field. Jiirgen 
Kliiners informed me about an interesting group for which a polynomial had not been found yet, namely 
SL2(Fi6) with its natural action on P 1 (Fi@). This action is faithful because of char(Fig) = 2. It must be 
noted that the existence of such a polynomial was already known to Mestre (unpublished). In this paper we 
will give an explicit example. 

Proposition 1. The polynomial 

P(x) := x 17 - 5x 16 + 12x 15 - 28a; 14 + 72a; 13 - 132a; 12 + 116a; 11 

- 74.x 9 + 90a; 8 - 28a; 7 - 12a; 6 + 24a; 5 - 12x 4 - 4a; 3 - 3a; - 1 <= Q[x] 

has Galois group isomorphic to SL2(Fig) with its natural action on P 1 (Fig). 

What is still unknown is whether there exists a regular extension of Q(T) with Galois group isomorphic to 
SL2(Fi6); regular here means that it contains no algebraic elements over Q apart from Q itself. In section 
|2]we will say some words about the calculation of the polynomial and the connection with modular forms. 
We'll indicate how one can verify that it has the claimed Galois group in section [3] using computational 
Galois theory. We will show in section [4] that this polynomial gives a Galois representation associated to 
an explicitly given modular form. 



2 Computation of the polynomial 

In this section we will briefly indicate how one can find a polynomial as in proposition!]] We will make use 
of modular forms. For an overview as well as many further references on this subject the reader is refered 
to 0. 

Let N be a positive integer and consider the space S2(Tq(N)) of holomorphic cusp forms of weight 2 
for To(N). A newform / S S^fTo^iV)) has a q-expansion / = Yl n >i a nq n where the coefficients a n 
are in a number field. The smallest number field containing all the coefficients is denoted by Kf. To a 
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given prime number I and a place A of Kf above I one can attach a semi-simple Galois representation 
~pj : Gal(Q/Q) — > GL2(F^) unramified outside Nl satisfying the following property: for each prime 
p \ N£ and any Frobenius element Frob p G Gal(Q/Q) attached to p we have 

Tr(/5y (Frobp)) = a p mod A and Det(py (Frob p )) = pmod A. (1) 

The representation is unique up to isomorphism. The fixed field of Ker(px) in Q is Galois over Q with 
Galois group isomorphic to Im(p^). For I = 2 and any A above I equation (Q} together with Chebotarev's 
density theorem imply that Irn(p/) is contained in SL2(Fa). So to show that there is an extension of Q 
with Galois group isomorphic to SL2(Fig) it suffices to find an N and a newform / £ S2 (To (N)) such 
that there is a prime A of degree 4 above 2 in Kf and Im(pf) is the full group SL2(Fa). Using modular 
symbols we can calculate the coefficients of /, hence traces of matrices that occur in the image of /?/■ 
For a survey paper on how this works, see [ 18 1. A subgroup T of SL2(Fi6) contains elements of every 
trace if and only if T equals SL2(Fi6); this can be shown in several ways, either by a direct calculation or 
by invoking a more general classification result like 1 20 , Thm. III. 6. 25]. With this in mind, after a small 
computer search in which we check the occurring values of Tr(py (Frob p )) up to some moderate bound 
of p, one finds that a suitable modular form / exists in S2 (To (137)). It turns out that we have Kf = Q(a) 
with the minimal polynomial of a equal to x 4 + 3cc 3 — 4a; — 1 and that / is the form whose q-expansion 
starts with 

/ = q + aq 2 + (a 3 + a 2 - 3a - 2)q 3 + (a 2 - 2)q 4 + ■■■ . 

Now the next question comes in: knowing this modular form, how does one produce a polynomial? In 
general, one can use the Jacobian Jq(N) to construct p/- In this particular case we can do that in the 
following way. We observe that Kf is of degree 4 and that the prime 2 is inert in it. Furthermore we can 
verify that the subspace of S2 (To (137)) fixed by the Atkin-Lehner operator ^137 is exactly the subspace 
generated by all the complex conjugates of /. These observations imply that p/ is isomorphic to the action 
of Gal(Q/Q) on Jac(Xo(137)/(«;i37))[2], where we give this latter space an Fi6-vector space structure 
via the action of the Hecke operators. Note that Im(pj) = SL2 (Fig) implies surjectivity of the natural map 
T — * Ok j 1(2) = Fi6, where T is the Hecke algebra attached to S2(To(N)). The methods described in 
[8 1 allow us now to give complex approximations of the 2-torsion points of Jac(Xo(137)/(wi37)) to a high 
precision. This part of the calculation took by far the most effort; the author will write more details about 
how this works in a future paper (or thesis). We use this to give a real approximation of a polynomial with 
Galois group isomorphic to SL2(Fig). The paper [8| does, at least implicitly, give a theoretical upper bound 
for the height of the coefficients of the polynomial hence an upper bound for the calculation precision to get 
an exact result. Though this upper bound is small in the sense that it leads to a polynomial time algorithm, 
it is still far too high to be of use in practice. However it turns out that we can use a much smaller precision 
to obtain our polynomial, the only drawback being that this does not give us a proof of its correctness, so 
we have to verify this afterwards. 

The polynomial P' obtained in this way has coefficients of about 200 digits so we want to find a polynomial 
of smaller height defining the same number field K. To do this, we first compute the ring of integers Ok 
of K. In [2] an algorithm to do this is described, provided that one knows the squarefree factorisation of 
Disc(/) and even if we don't know the squafrefree factorisation of the discriminant, the algorithm produces 
a 'good' order in K. Assuming that our polynomial P' is correct we know that K is unramified outside 
2 • 137 so we can easily calculate the squarefree factorisation of Disc(/) and hence apply the algorithm. 
Having done this we obtain an order in K with a discriminant small enough to be able to factor and hence 
we know that this is indeed the maximal order Ok- Explicitly, the discriminant is equal to 

Disc(0 A ') = 2 30 ■ 137 8 . (2) 

We embed Ok as a lattice into C\ K:< ^ in the natural way and use lattice basis reduction, see lfl3ll . to 
compute a short vector a G Ok — Z. The minimal polynomial of a has small coefficients. In our particular 
case [K : Q] is equal to 17, which is a prime number, hence this new polynomial must define the full 
field K. This method gives us also a way of expressing a as an element of Q(x) / (P' (x)) . 
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3 Verification of the Galois group 



Now that we have computed a polynomial P(x), we want to verify that its Galois group Gal(P) is really 
isomorphic to SL2(Fi6) and that we can identify the set £1(P) of roots of P with P 1 (Fig) in such a way 
that the action of Gal(P) on Q(P) is identified with the action of SL 2 (Fi 6 ) on P 1 (Fi 6 ). 

For completeness let us remark that it is easy to verify that P(x) is irreducible since it is irreducible modulo 
5. The irreducibility of P implies that Gal(P) is a transitive permutation group of degree 17. The transitive 
permutation groups of degree 17 have been classified, see for example [17|. From ||20l Thm. III. 6. 25] it 
follows that up to conjugacy there is only one subgroup of index 17 in SL 2 (F 16 ), namely the group of 
upper triangular matrices. This implies that up to conjugacy there is exactly one transitive G < Sn that 
is isomorphic to SLi2(Fi6). Hence if Gal(P) = SL/2(Fi6) is an isomorphism of groups then there is an 
identification of f2(P) with P 1 (Fig) such that the group actions become compatible. It follows from the 
classification in |17| that if the order of a transitive G < Sn is divisible by 5, then G must contain a 
transitive subgroup isomorphic to SL2(Fi6). To show that 5 | # Gal(P) we use the fact that for a prime 
p \ Disc(P) we the decomposition type of P modulo p is equal to the cycle type of any Frob p € Gal(P) 
attached to p. One can verify that modulo 7 we get the following decomposition into irreducibles: 

P = - 3) - 5) 15 + 3x 1A + 4a; 12 + 6X 11 + 3x w + x 9 + 5x s + x 6 + x 5 + 2a; 4 + 4x 3 + 4x 2 + 3x + 6) , 

showing that indeed 5 | # Gal(P) hence Gal(P) contains SL 2 (F 16 ) as a subgroup. 

To show that Gal(P) cannot be bigger than SL2(Fi6) it seems inevitable to use heavy computer calcula- 
tions. It would be interesting to see a method which does not use this. 

Note that the action of SL2(Fig) on P 1 (Fig) is sharply 3-transitive. So first we show that Gal(P) is not 
4-transitive to prove that it does not contain Ayr. To do this we start with calculating the polynomial 

Q(x) := Yl {X -a 1 -a 2 -a s - a 4 ) , (3) 

{ai,a2,Q3,a4}Cfl(P) 

where the product runs over all subsets of {1, ... , 17} consisting of exactly 4 elements. This implies that 
deg(Q) = 2380. One can calculate Q(x) by symbolic methods, see [5|. Suppose that Gal(P) acting on 
f2(P) is 4-transitive. Then the action on il(Q) is transitive hence Q(x) is irreducible. So if we can show 
that Q(x) is reducible, we have shown that Gal(P) is not 4-transitive. 

We have two ways to find a nontrivial factor of Q(x): the first way is use a factorisation algorithm and 
the second way is to produce a candidate factor ourselves. An algorithm that works very well for our type 
of polynomial is Van Hoeij's algorithm, see ifTUl . One finds that Q(x) is the product of 3 polynomials 
of degrees 340, 1020 and 1020 respectively. A more direct way to produce a candidate factorisation is 
as follows. The method from [8] gives a bijection between the set of approximated complex roots of P' 
and the set P 1 (Fig) such that the action of Gal(P') on ft(P') corresponds to the action of SL2(Fi6) on 
P 1 (Fig), assuming the outcome is correct. From the previous section we know how to express the roots 
of P as rational expressions in the roots of P hence this gives us a bijection between O(P) and P 1 (Fig), 
conjecturally compatible with the group actions of Gal(P) and SL2(Fig) respectively. A calculation shows 
that the action of SL2(Fig) on the set of unordered four-tuples of elements of P 1 (Fig) has 3 orbits, of size 
340, 1020 and 1020 respectively. Using approximations to a high precision of the roots, we use these orbits 
to produce sub-products of ||3), round off the coefficients to the nearest integer and verify afterwards that 
the obtained polynomials are indeed factors of Q(x). 

Let us remark that SL2(Fig) x Aut(Fie) with its natural action on P 1 (Fig) is a transitive permutation 
group of degree 17, hence also its subgroup G := SL2(Fi6) x (Frob 2 ). Furthermore, it is well-known that 
SL2(Fi6) x Aut(Fi6) is isomorpic to Aut(SL2(Fi6)) (where SL2(Fig) acts by conjugation and Aut(Fie) 
acts on matrix entries) and actually inside Si 7 this group is the normaliser of both SL2(Fig) and itself. 
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According to the classifiation of transitive permutation groups of degree 17 in IfTTl these two groups are 
the only ones that lie strictly between SL2(Fi6) and Arj. Once we have fixed SL2(Fi6) inside Sir, these 
two groups are actually unique subgroups of Sn, not just up to conjugacy. 

Note that the index [A 17 : Aut(SL 2 (F 16 ))] is huge, namely 10897286400. If we can verify that G is not a 
subgroup of Gal(P), then we are done. The fact that the index is small and the uniqueness of G make an 
algorithm of Geissler and Kliiners, see [9|, very suitable to decide whether G < Gal(P). It turns out that 
this is not the case, hence Gal(P) = SL,2(Fi6). 

4 Does P indeed define pj? 

So now that we have shown that Gal(P) = SL2(Fig) we can wonder whether we can prove that P comes 
from the modular form / we used to construct it with. Once an isomorphism of Gal(P) with SL 2 (Fig) is 
given, the polynomial P defines a representation ~p P : Gal(Q/Q) — > SL2(Fi6). Above we mentioned that 
that Out(SL 2 (Fi6)) is isomorphic to Aut(Fi6) acting on matrix entries. Hence, up to an automorphism of 
Fi6, the map sending a G Gal(Q/Q) to the characteristic polynomial of pp in Fie [a:] is determined by P 
and in fact the isomorphism class of ~p P is well-defined up to an automorphism of Fig. More concretely, 
we have to show that the splitting field of P, which we will denote by L, is the fixed field of Kcr(py). In 
this section we will be using basic properties of local fields as can be found in |fl31 . 

A continuous representation p : Gal(Q/(Q>) — * GL2(F^) has a level N(~p) and a weight k(fi). Instead of 
repeating the full definitions here, which are lengthy (at least for the weight) and can be found in [ 16] (see 
also Q for a discussion on the definition of the weight), we will just say that they are defined in terms of 
the local representations p p : Gal(Q p /Q p ) — ■» GL2(F^) obtained from p. The level is defined in terms 
of the representations p p with p ^ £ and the weight is defined in terms of p^. Serre states the following 
conjecture in ifTBI . 

Conjecture 1. Let £ be a prime and let p : Gal(Q/Q) — > GL2 (Fe) be a continuous odd irreducible Galois 
representation (a representation is called odd if the image of a complex conjugation has determinant —1). 
Then there exists a modular form f of level N(~p) and weight k(j>) which is a normalised eigenform and a 
prime X \ £ of Kf such that p and p~f x become isomorphic after a suitable embedding ofF\ into Fg. 

Recently, Khare and Wintenberger proved in Hill the following part of conjectureQ] 

Theorem 1. Conjecture\l\holds in each of the following cases: 

• N(~p) is odd and £ > 2. 

• £= 2andk(p) = 2. 

With theorem[T]in mind it is sufficient to prove that a representation p = Pp attached to P has level 137 
and weight 2, which are the level and weight of the modular form / we used to construct it with and that 
of all eigenforms in S f 2(ri(137)), the form / is one which gives rise to pp. Therefore, in the remainder of 
this section we will verify the following proposition. 

Proposition 2. Let f be the cusp form from section^ Up to an automorphism o/Fig, the representations 
~p P andp~j ( 2 ) are isomorphic. In particular, the representation ~p P has Serre-level 137 and Serre-weight 2. 

4.1 Verification of the level 

The level is the easiest of the two to verify. Here we have to do local computations in p-adic fields with 
p ^ 2. According to the definition of N(~p) in 1 16 1 it suffices to verify that p is unramified outside 2 and 
137, tamely ramified at 137 and the local inertia subgroup I at 137 leaves exactly one point of P 1 (Fig) 
fixed. That pp is unramified outside 2 and 137 follows immediately from (0. 
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From d2]i and the fact that 137 8 || Disc(P) it follows that the monogeneous order defined by P is maximal 
at 137. Modulo 137, the polynomial P factors as 



Let v be any prime above 137 in L. From the above factorisation it follows that the prime 137 decomposes 
in K as a product of 5 primes; one of them has its inertial and ramification degree equal to 1 and the 
other four ones have their inertial and ramification degrees equal to 2. Thus deg(w) is a power of 2, as 
L is obtained by succesively adjoining roots of P and in each step the relative inertial and ramification 
degrees of the prime below v are both at most 2. In particular, G&\(L V /Qi3j) is a subgroup of SL2(Fi6) 
whose order is a power of 2. Now, {(J *)} is a Sylow 2-subgroup of SL^Fig), so Gal(L„ /Q137) is, 
up to conjugacy, a subgroup of {(J *)}. Hence I is also conjugate to a subgroup of {(J *)} and it is 
actually nontrivial because 137 ramifies in L (so I of order 2 since the tame inertia group of any finite 
Galois extension of local fields is cyclic). 

It is immediate that p is tamely ramified at 137 as no power of 2 is divisible by 137. Also, it is clear that 
I has exactly one fixed point in P^Fie) since [(*)] is the only fixed point of any nontrivial element of 
{(I *)}. This establishes the verification of N(p) = 137. 

4.2 Verification of the weight 

Because the weight is defined in terms of the induced local representation Gal(Q 2 /Q2), we will try to 
compute some relevant properties of the splitting field L v of P over Q2, where v is any place of L above 2. 
In p-adic fields one can only do calculations with a certain precision, but this does not give any problems 
since practically all properties one needs to know can be verified rigorously using a bounded precision 
calculation and the error bounds in the calculations can be kept track of exactly. 

The polynomial P does not define an order which is maximal at the prime 2. Instead we use the polynomial 

R = x 17 - llx 16 + 64x 15 - 322x 14 + 916x 13 + 276a; 12 - 5380a; 11 + 2748a; 10 + 6904a; 9 - 23320a; 8 
+ 131500a; 7 - 140744a; 6 - 16288a; 5 - 39752a; 4 - 48840a; 3 + 102352a; 2 + 234466a; - 1518, 

which is the minimal polynomial of 

(36863 + 22144a + 123236a 2 + 154875a 3 - 416913a 4 + 436074a 5 + 229905a 6 - 1698406a 7 
+ 1857625a 8 - 467748a 9 - 2289954a 10 + 2838473a 11 - 1565993a 12 + 605054a 13 - 263133a 14 
+ 112104a 15 - 22586a 16 ) /8844, 

where a is a root of P. We can factor R over Q2 and see that it has one root in Q2 which happens to be 
odd, and an Eisenstein factor of degree 16, which we will call E. This type of decomposition can be read 
off from the Newton polygon of R and it also shows that the order defined by R is indeed maximal at 2. 
From the oddness of the root and (O it follows that. 



For the action of Gal(Q 2 /Q2) on P 1 (Fig) the factorisation means that there is one fixed point and one 
orbit of degree 16. If we adjoin a root (3 of E to Q2 and factor E over tnen we see mat it h as an 

irreducible factor of degree 15; in [4 J one can find methods for factorisation and irreducibility testing that 
can be used to verify this. This means that [L v : Q2] is at least 240. 

A subgroup of SL2(Fig) that fixes a point has to be conjugate to a subgroup of the group 



P = (x + U){x 2 + 6x + 101) 2 (a; 2 + 88a; + 97) 2 (x 2 + 106a; + 112) 2 (x 2 + 133a; + 110) 2 . 



v 2 (Disc(E)) = 30. 



(4) 
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which is the stabiliser subgroup of [(£)]. From #if = 240 it follows that Gal(L„/Q2) is isomorphic to H 
and from now on we will identify these two groups with each other. We can filter H by normal subgroups: 



HDlDl 2 D {e}, 



where I is the inertia subgroup and I2 is the wild ramification subgroup, which is the unique Sylow 2- 
subgroup of I. We wish to determine the groups I and 12- Let k(v) be the residue class field of L v . The 
group H/I is isomorphic to Gal(fc(u)/F2) and I/I2 is isomorphic to a subgroup of k(v)*. In particular 
[I : h] I {2 [H ' J] - 1) follows. The group H has the nice property 



which is its unique Sylow 2-subgroup. As H/ 1 is abelian, we see that [H, H] C I. We conclude that 
I2 = [H,H], since above we remarked that I2 is the unique Sylow 2-subgroup of I. The restriction 
[7 : h] I (2[ ff:/ l - 1) leaves only one possibility for I, namely 1 = 1-2. 

Let L' v be the subextension of L v /Q2 fixed by I. Then L' v is the maximal unramified subextension as 
well as the maximal tamely ramified subextension. It is in fact isomorphic to Q2 15 , the unique unramified 
extension of Q2 of degree 15 and the Eisenstein polynomial E from above, being irreducible over any 
unramified extension of Q2. is a defining polynomial for the extension L v /Q 2 15 - According to lfl4l Thm. 3] 
we can relate the discriminant of L v to k(fi) as follows: 



It follows from © that w 2 (Disc(L„/Q 2 )) = 30 • 15 = 450, so indeed k(p) = 2. 

4.3 Verification of the form / 

Now we know N(~p P ) = 137andfc(/5p) = 2 theorem[T]shows that there is an eigenform g G S , 2(ri(137)) 
giving rise to pp. Using J5] Cor. 2.7] we see that if such a g exists, then there actually exists such a g of 
trivial Nebentypus, i.e. g G S2(Tq(137)) (as SL2(Fi6) is non-solvable pp cannot be an induced Hecke 
character from Q(i)). 

A modular symbols calculation shows that there exist two Galois orbits of newforms in S , 2(ro(137)): the 
form / we used for our calculations and another form, g say. The prime 2 decomposes in K g as a product 
X 3 p, where A has inertial degree 1 and /i has inertial degree 4. So it could be that g mod \i gives rise to pp. 
We will show now that / mod (2) and g mod p actually give the same representation. The completions of 
Ok s and Ok 9 at the primes (2) and p respectively are both isomorphic to Zig, the unramified extension 
of Z2 of degree 4. After a choice of embeddings of Or, and Ok cj into Zig we obtain two modular forms 
/' and g' with coefficients in Zie and we wish to show that a suitable choice of embeddings exists such 
that they are congruent modulo 2. According to 1 19, Thm. 1], it suffices to check there is a suitable choice 
of embeddings that gives a n (f) = a n {g')mod2 for all n < [SL 2 (Z) : r (137)]/6 = 23 (in EH this 
theorem is formulated for modular forms with coefficients in the ring of integers of a number field, but the 
proof also works forp-adic rings). Using a modular symbols calculation, this can be easily verified. 
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